WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-49187

7.1HIGH

Key Information:

Vendor: Wordpress
Status: Adifier - Classified Ads WordPress Theme
Vendor: CVE Published:; 15 December 2023

What is CVE-2023-49187?

The Spoonthemes Adifier - Classified Ads WordPress Theme is susceptible to a Cross-site Scripting (XSS) vulnerability, specifically a reflected XSS issue. This flaw allows attackers to inject malicious scripts into web pages that are then reflected off servers without proper validation. The vulnerability affects versions prior to 3.1.4 and can lead to unauthorized data access and user session hijacking if not addressed promptly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Adifier - Classified Ads WordPress Theme < 3.1.4

References

https://patchstack.com/database/vulnerability/adifier/wor...

vdb-entry

CVSS V3.1

Score:

7.1

Severity:

HIGH

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Dec 15, 2023
Vulnerability Reserved
Nov 22, 2023

Credit

FearZzZz (Patchstack Alliance)

JSON

Wordpress